Search/CVE-2004-0688

● CVE

CVE-2004-0688

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

View graph Watch Export

CVSS v3.1

—

EPSS

7.25%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

4 relationships

Timeline

disclosure → media coverage

Oct 20, 2004

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026